'GRANT GRANT ON table_or_database_name ...' gave a syntax error.
'GRANT GRANT OPTION ON table_or_database_name ...' worked, but the result
was as before, i.e. the new user still couldn't grant access to the table or
database.

Inspection of the grant tables showed the following:

Table 'user'
Field 'User': Value 'demouser' Field 'Grant_Priv': Value 'N'

Table 'db'
Field 'Db': Value 'test' Field 'User': Value 'demouser' Field 'Grant_Priv':
Value 'Y'

Do I have to set 'Grant_Priv' to 'Y' for 'demouser' in the 'user' table?
Doesn't that give the user global GRANT privileges, rather than restricting
them to the single database 'test'? Or do I have to give the user Read/Write
privs. to the grant tables, and if so, what are the minimum privileges
required?

Regards,

John R. Porter
I.T. Services
University of Strathclyde
Faculty of Education
76 Southbrae Drive
Glasgow
G13 1PP
e-mail: [EMAIL PROTECTED]
Tel. 0141 950 3289


-----Original Message-----
From: aman [mailto:[EMAIL PROTECTED]
Sent: 21 July 2004 17:17
To: [EMAIL PROTECTED]
Subject: RE: Problem with GRANT...WITH GRANT OPTION


Also, if you have any doubts whether your changes took the right effect,
check the mysql database on your server and check out the tables that
store privileges assigned by your GRANT query.

Aman Raheja
http://www.techquotes.com


On Wed, 2004-07-21 at 11:11, Martin Gainty wrote:
> John-
>
> GRANT privilege ON table_or_database_name TO [EMAIL PROTECTED] IDENTIFIED BY
> 'password'
>
> in this case you need to
> GRANT GRANT ON table_or_database_name TO [EMAIL PROTECTED] IDENTIFIED BY
> 'password'
>
> Hope this helps,
>
> Martin Gainty
> SQL Consultant
> USA 001-617-852-7822
>
>
>
>
>
> >From: "John R. Porter" <[EMAIL PROTECTED]>
> >To: <[EMAIL PROTECTED]>
> >Subject: Problem with GRANT...WITH GRANT OPTION
> >Date: Wed, 21 Jul 2004 14:54:10 +0100
> >MIME-Version: 1.0
> >Received: from lists.mysql.com ([213.136.52.31]) by mc2-f16.hotmail.com
> >with Microsoft SMTPSVC(5.0.2195.6824); Wed, 21 Jul 2004 06:56:43 -0700
> >Received: (qmail 30011 invoked by uid 109); 21 Jul 2004 13:54:17 -0000
> >Received: (qmail 29991 invoked from network); 21 Jul 2004 13:54:17 -0000
> >Received: pass (lists.mysql.com: local policy)
> >X-Message-Info: JGTYoYF78jHJ0WhRVXWZU4HTCZz6ybBU
> >Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
> >List-ID: <mysql.mysql.com>
> >Precedence: bulk
> >List-Help: <mailto:[EMAIL PROTECTED]>
> >List-Unsubscribe:
> ><mailto:[EMAIL PROTECTED]>
> >List-Post: <mailto:[EMAIL PROTECTED]>
> >List-Archive: http://lists.mysql.com/mysql/169422
> >Delivered-To: mailing list [EMAIL PROTECTED]
> >Message-ID: <[EMAIL PROTECTED]>
> >X-MSMail-Priority: Normal
> >X-Mailer: Microsoft Outlook CWS, Build 9.0.6604 (9.0.2911.0)
> >In-Reply-To: <[EMAIL PROTECTED]>
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
> >X-Strath-Information: Contact <[EMAIL PROTECTED]> for more
> >information
> >X-Strath-Scan: clean
> >X-Strath-UBECheck: X-Virus-Checked: Checked
> >Return-Path: [EMAIL PROTECTED]
> >X-OriginalArrivalTime: 21 Jul 2004 13:56:43.0725 (UTC)
> >FILETIME=[8E23FFD0:01C46F2A]
> >
> >I created a new user with a GRANT statement like:
> >
> >GRANT SELECT, INSERT, UPDATE, DELETE ON test.* TO 'demouser'@'localhost'
> >IDENTIFIED BY 'testpwd' WITH GRANT OPTION
> >
> >If I then log in as 'demouser' I can execute SELECT etc. statements on
the
> >'test' database, but if I try to create another user with access to
'test'
> >using:
> >
> >GRANT Select ON test.* TO 'newuser'@'localhost' IDENTIFIED BY 'newpwd'
> >
> >I get:
> >
> >Error: 1044 - Access denied for user: '[EMAIL PROTECTED]' to database
> >'mysql'
> >
> >Does 'demouser' have to be explicitly GRANTed access to the MySQL grant
> >tables (user, db, host, tables_priv and columns_priv) before the user can

> >be
> >GRANTed GRANT privileges to any database or table? If so, what are the
> >minimum privileges required?
> >
> >John R. Porter
> >I.T. Services
> >University of Strathclyde
> >Faculty of Education
> >76 Southbrae Drive
> >Glasgow
> >G13 1PP
> >e-mail: [EMAIL PROTECTED]
> >Tel. 0141 950 3289
> >
> >
> >
> >
> >--
> >MySQL General Mailing List
> >For list archives: http://lists.mysql.com/mysql
> >To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]
> >
>
> _________________________________________________________________
> Express yourself instantly with MSN Messenger! Download today - it's FREE!
> http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
>


--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:
http://lists.mysql.com/[EMAIL PROTECTED]


-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]

Reply via email to